Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5aca9c9e-1b1d-3e77-80f6-b1bbe338593f.roa
File: 5aca9c9e-1b1d-3e77-80f6-b1bbe338593f.roa (raw, json)
Hash identifier: AYq6KFDm8qOvhGjbDp1wt3whqfK47mf8UnDqUkUwkEw=
Subject key identifier: 23:B9:DB:2A:75:3F:D5:37:D6:1A:72:A0:B7:2F:11:72:C5:70:5D:C0
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858489E6CE57A50936F0357E37280
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5aca9c9e-1b1d-3e77-80f6-b1bbe338593f.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 22909
IP address blocks: 68.53.251.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6c:e5:7a:50:93:6f:03:57:e3:72:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=578d4d04-2faa-4ed7-a6e7-abe98a5ed60b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:28:2b:01:a4:92:8f:83:6c:b2:f9:55:85:fd:
db:b3:cc:0c:ef:5d:5e:3b:b8:f9:fa:e7:be:4a:4b:
32:8c:eb:c4:b6:cd:68:8c:bf:8e:ae:c4:44:c3:c1:
46:7e:a0:ef:5d:aa:81:b6:d8:ae:41:7b:fb:d0:45:
ff:76:71:99:46:01:b1:e9:1f:82:c2:7e:18:d0:c1:
7e:eb:c4:3c:94:aa:14:c2:90:10:07:5c:a4:b2:86:
d1:b6:2c:33:9b:c3:bf:7b:e9:69:25:95:59:be:f5:
69:79:ce:06:79:a7:76:b0:63:0f:3b:7b:3f:04:82:
2f:6a:16:f7:e6:66:ec:1b:0e:a6:fe:e2:8e:22:b4:
5b:c4:96:fa:ac:09:89:53:91:94:aa:bd:50:12:ea:
ef:d3:e9:22:e6:f5:7c:2b:f9:27:22:55:d6:8a:ed:
f4:09:25:ef:b9:8b:cc:b5:93:93:ce:04:ec:82:10:
0b:42:d1:c9:3c:59:ed:6d:5c:6f:59:8e:30:c5:e1:
5f:ac:ef:20:7e:25:8d:d2:03:87:b2:bf:9a:76:4e:
79:10:7f:55:f8:bb:13:66:27:ab:c5:de:1b:c6:96:
bb:27:b5:7c:fa:fd:a6:79:42:17:19:cf:21:94:02:
e8:26:ac:bd:12:37:a7:1b:e4:3a:0c:04:6c:ad:46:
04:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:B9:DB:2A:75:3F:D5:37:D6:1A:72:A0:B7:2F:11:72:C5:70:5D:C0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5aca9c9e-1b1d-3e77-80f6-b1bbe338593f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.53.251.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
97:c7:05:a3:99:6d:fa:61:43:3c:c9:69:62:69:e7:4b:1d:7b:
72:4a:7e:b8:78:80:d5:d4:d5:3b:1c:2b:1f:98:44:b9:3c:fc:
31:24:06:65:c4:52:6b:09:5d:1a:71:37:66:45:af:5f:d5:0c:
4e:8a:e3:78:39:f8:b4:7e:bd:83:d1:df:2f:ce:23:3c:d3:66:
37:2c:a1:b0:74:e9:dd:3d:21:2d:3d:3d:62:54:4d:2b:24:f7:
2e:27:db:cd:0e:05:ce:7c:b9:06:d2:9e:94:52:63:bc:87:ea:
cc:cd:be:47:0a:bc:ae:5f:e5:17:32:ff:3b:ce:ac:fd:c5:3a:
ac:59:b6:ae:12:2a:af:e9:ba:b9:38:dc:54:1e:76:d3:25:d2:
15:5d:ab:91:52:a8:ca:45:8d:75:1f:be:4b:9b:f9:9d:99:65:
ff:58:3b:19:a6:3c:a8:d9:cc:95:cb:a9:c0:84:68:9f:13:eb:
db:d1:e6:49:21:00:a0:5a:5b:6a:48:11:ca:a6:fb:99:fc:25:
e2:5b:cf:23:2d:e6:b8:41:5b:c1:d8:25:d6:8a:0d:01:92:17:
cc:61:08:9f:07:a4:84:9b:01:ae:be:80:97:5e:f7:7f:a8:e0:
4a:0b:87:cc:f9:00:5a:9b:47:82:a6:64:8a:f6:1a:fd:1f:86:
d7:bc:e8:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:06:27 2025 by rpki-client